Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/461a83-810c-43ae-ac25-64e2bd619318/1/wWD3u-jXY2d3YUisuMTKNflr6Vc.mft
File: wWD3u-jXY2d3YUisuMTKNflr6Vc.mft (raw, json)
Hash identifier: jZY1G54yCx7ujjv+BQ3aUSZeTSlKgjjakFqbdRC8GcQ=
Subject key identifier: 97:14:72:3E:6C:93:81:82:E4:58:82:48:14:93:30:6D:A2:33:2F:32
Authority key identifier: C1:60:F7:BB:E8:D7:63:67:77:61:48:AC:B8:C4:CA:35:F9:6B:E9:57
Certificate issuer: /CN=c160f7bbe8d76367776148acb8c4ca35f96be957
Certificate serial: 019D98BDABB7DCAD4CC92CD33F1C9F09D0AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wWD3u-jXY2d3YUisuMTKNflr6Vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/461a83-810c-43ae-ac25-64e2bd619318/1/wWD3u-jXY2d3YUisuMTKNflr6Vc.mft
Manifest number: 1893
Signing time: Fri 17 Apr 2026 00:01:00 +0000
Manifest this update: Fri 17 Apr 2026 00:01:00 +0000
Manifest next update: Sat 18 Apr 2026 00:01:00 +0000
Files and hashes: 1: wWD3u-jXY2d3YUisuMTKNflr6Vc.crl (hash: 4nU7mhdGkgx7HWSnwwbg6FixaiE4mG/w3cZQpjXZYL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/461a83-810c-43ae-ac25-64e2bd619318/1/wWD3u-jXY2d3YUisuMTKNflr6Vc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/461a83-810c-43ae-ac25-64e2bd619318/1/wWD3u-jXY2d3YUisuMTKNflr6Vc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wWD3u-jXY2d3YUisuMTKNflr6Vc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 00:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:ab:b7:dc:ad:4c:c9:2c:d3:3f:1c:9f:09:d0:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c160f7bbe8d76367776148acb8c4ca35f96be957
Validity
Not Before: Apr 17 00:01:00 2026 GMT
Not After : Apr 18 00:01:00 2026 GMT
Subject: CN=9714723e6c938182e45882481493306da2332f32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:cf:db:d1:7f:dc:e8:ea:48:2c:3c:14:5d:af:
8c:0d:8a:e7:d7:8a:72:bf:41:ed:d9:10:0c:33:b7:
fa:16:c4:77:a1:61:94:dd:9e:68:27:1c:18:88:49:
5c:90:53:5c:f3:27:f9:f1:84:61:53:a1:03:e8:fa:
c2:de:8c:e3:15:c9:69:2d:02:03:66:ed:2d:4e:b6:
27:dd:54:ff:de:6e:81:20:09:77:eb:cd:01:ff:91:
e7:7b:9e:1d:ad:10:f8:d3:62:52:50:1d:74:d1:0f:
18:08:c5:d1:65:ad:2a:52:ee:a2:ab:30:57:e8:e3:
23:d4:b3:41:9f:75:42:80:0e:e2:95:52:7b:c9:3d:
ca:0d:4b:93:ed:9f:0b:05:4d:52:b9:5d:65:a5:af:
36:d5:4b:69:80:a5:9c:f8:72:01:dd:e5:99:cd:2f:
b5:52:1e:c5:61:d5:12:2c:85:7f:5d:8d:55:e2:72:
c2:86:0c:72:94:7c:75:99:77:3b:b9:fc:29:98:65:
78:ca:8b:de:62:9a:9a:ef:8c:61:08:40:48:90:70:
84:56:7a:f2:92:3f:65:64:6e:df:31:7a:e8:ad:65:
66:5d:43:3d:c7:87:0a:a8:cf:18:0f:06:c2:26:45:
be:8c:16:02:4c:85:c2:5a:2c:5f:7c:44:50:53:c7:
df:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:14:72:3E:6C:93:81:82:E4:58:82:48:14:93:30:6D:A2:33:2F:32
X509v3 Authority Key Identifier:
keyid:C1:60:F7:BB:E8:D7:63:67:77:61:48:AC:B8:C4:CA:35:F9:6B:E9:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wWD3u-jXY2d3YUisuMTKNflr6Vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/461a83-810c-43ae-ac25-64e2bd619318/1/wWD3u-jXY2d3YUisuMTKNflr6Vc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/461a83-810c-43ae-ac25-64e2bd619318/1/wWD3u-jXY2d3YUisuMTKNflr6Vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:c3:e3:d3:b8:52:f5:72:61:f4:f9:57:79:1a:fc:cf:f9:19:
03:16:c1:c3:74:d2:d2:d9:c0:19:61:39:9a:a0:6d:5b:92:62:
b9:4d:0f:dc:f4:80:0b:4b:4e:75:dc:64:7d:eb:78:66:ea:c5:
2e:58:2f:3a:92:2d:54:9a:8e:7b:d8:92:53:89:19:09:38:7a:
61:bd:cc:ea:4b:a7:f8:ac:be:f3:04:65:ba:67:7b:25:bf:0c:
29:e3:06:e2:fe:f9:9c:cc:0d:64:1e:1a:35:03:44:b6:0b:c8:
54:77:81:e1:66:af:96:f9:6b:78:f4:93:da:80:57:a7:e9:98:
32:9b:46:0f:05:ea:47:85:19:13:a2:f0:c4:38:c4:14:f6:2e:
10:ff:71:a8:50:38:7a:11:a4:a5:ef:95:a9:04:a3:46:0a:69:
0b:7a:ca:fb:e1:52:e2:0b:4c:b9:95:75:a7:21:9b:5d:4b:18:
44:4a:a8:6c:d5:4e:88:a3:a3:c4:2b:d6:05:e3:bb:a3:06:b8:
97:6e:6a:ac:c1:28:1e:c4:0a:92:e6:73:80:a1:31:b5:0d:d2:
4f:15:44:90:72:53:6c:e3:c6:2a:a1:f8:aa:b9:e2:9d:bb:b8:
3f:3e:80:ad:e9:33:da:10:a9:0b:28:fe:a6:48:27:9e:ca:5d:
92:63:be:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:47:41 2026 by rpki-client